[FLINK-38694] Update dependencies to latest versions

flink-shaded-asm-9/pom.xml

@@ -35,7 +35,7 @@ under the License.
 
     <properties>
         <asm.major.version>9</asm.major.version>
-        <asm.version>${asm.major.version}.8</asm.version>
+        <asm.version>${asm.major.version}.9.1</asm.version>
     </properties>
 
     <dependencies>

flink-shaded-asm-9/src/main/resources/META-INF/NOTICE

@@ -7,7 +7,7 @@ The Apache Software Foundation (http://www.apache.org/).
 This project bundles the following dependencies under the BSD license.
 See bundled license files for details.
 
-- org.ow2.asm:asm-analysis:9.8
-- org.ow2.asm:asm-commons:9.8
-- org.ow2.asm:asm-tree:9.8
-- org.ow2.asm:asm:9.8
+- org.ow2.asm:asm-analysis:9.9.1
+- org.ow2.asm:asm-commons:9.9.1
+- org.ow2.asm:asm-tree:9.9.1
+- org.ow2.asm:asm:9.9.1

flink-shaded-guava-33/src/main/resources/META-INF/NOTICE

@@ -6,5 +6,5 @@ The Apache Software Foundation (http://www.apache.org/).
 
 This project bundles the following dependencies under the Apache Software License 2.0 (http://www.apache.org/licenses/LICENSE-2.0.txt)
 
-- com.google.guava:guava:33.4.0-jre
-- com.google.guava:failureaccess:1.0.2
+- com.google.guava:guava:33.5.0-jre
+- com.google.guava:failureaccess:1.0.3

flink-shaded-jackson-parent/flink-shaded-jackson-2/pom.xml

@@ -25,7 +25,7 @@ under the License.
     <parent>
         <groupId>org.apache.flink</groupId>
         <artifactId>flink-shaded-jackson-parent</artifactId>
-        <version>2.18.2-21.0</version>
+        <version>2.20.1-21.0</version>
     </parent>
 
     <artifactId>flink-shaded-jackson${flink.ci.license.suffix}</artifactId>
@@ -110,4 +110,4 @@ under the License.
             </plugin>
         </plugins>
     </build>
-</project>
+</project>

flink-shaded-jackson-parent/flink-shaded-jackson-2/src/main/resources/META-INF/NOTICE

@@ -6,12 +6,12 @@ The Apache Software Foundation (http://www.apache.org/).
 
 This project bundles the following dependencies under the Apache Software License 2.0 (http://www.apache.org/licenses/LICENSE-2.0.txt)
 
-- com.fasterxml.jackson.core:jackson-annotations:2.18.2
-- com.fasterxml.jackson.core:jackson-core:2.18.2
-- com.fasterxml.jackson.core:jackson-databind:2.18.2
-- com.fasterxml.jackson.dataformat:jackson-dataformat-csv:2.18.2
-- com.fasterxml.jackson.dataformat:jackson-dataformat-smile:2.18.2
-- com.fasterxml.jackson.dataformat:jackson-dataformat-yaml:2.18.2
-- com.fasterxml.jackson.datatype:jackson-datatype-jdk8:2.18.2
-- com.fasterxml.jackson.datatype:jackson-datatype-jsr310:2.18.2
-- org.yaml:snakeyaml:2.3
+- com.fasterxml.jackson.core:jackson-annotations:2.20
+- com.fasterxml.jackson.core:jackson-core:2.20.1
+- com.fasterxml.jackson.core:jackson-databind:2.20.1
+- com.fasterxml.jackson.dataformat:jackson-dataformat-csv:2.20.1
+- com.fasterxml.jackson.dataformat:jackson-dataformat-smile:2.20.1
+- com.fasterxml.jackson.dataformat:jackson-dataformat-yaml:2.20.1
+- com.fasterxml.jackson.datatype:jackson-datatype-jdk8:2.20.1
+- com.fasterxml.jackson.datatype:jackson-datatype-jsr310:2.20.1
+- org.yaml:snakeyaml:2.4

flink-shaded-jackson-parent/flink-shaded-jackson-module-jsonSchema-2/pom.xml

@@ -25,7 +25,7 @@ under the License.
     <parent>
         <groupId>org.apache.flink</groupId>
         <artifactId>flink-shaded-jackson-parent</artifactId>
-        <version>2.18.2-21.0</version>
+        <version>2.20.1-21.0</version>
     </parent>
 
     <artifactId>flink-shaded-jackson-module-jsonSchema${flink.ci.license.suffix}</artifactId>
@@ -92,4 +92,4 @@ under the License.
             </plugin>
         </plugins>
     </build>
-</project>
+</project>

flink-shaded-jackson-parent/flink-shaded-jackson-module-jsonSchema-2/src/main/resources/META-INF/NOTICE

@@ -6,8 +6,8 @@ The Apache Software Foundation (http://www.apache.org/).
 
 This project bundles the following dependencies under the Apache Software License 2.0 (http://www.apache.org/licenses/LICENSE-2.0.txt)
 
-- com.fasterxml.jackson.core:jackson-annotations:2.18.2
-- com.fasterxml.jackson.core:jackson-core:2.18.2
-- com.fasterxml.jackson.core:jackson-databind:2.18.2
-- com.fasterxml.jackson.module:jackson-module-jsonSchema:2.18.2
-- javax.validation:validation-api:1.1.0.Final
+- com.fasterxml.jackson.core:jackson-annotations:2.20
+- com.fasterxml.jackson.core:jackson-core:2.20.1
+- com.fasterxml.jackson.core:jackson-databind:2.20.1
+- com.fasterxml.jackson.module:jackson-module-jsonSchema:2.20.1
+- javax.validation:validation-api:1.1.0.Final

flink-shaded-jackson-parent/flink-shaded-jsonpath/pom.xml

@@ -25,13 +25,13 @@ under the License.
     <parent>
         <groupId>org.apache.flink</groupId>
         <artifactId>flink-shaded-jackson-parent</artifactId>
-        <version>2.18.2-21.0</version>
+        <version>2.20.1-21.0</version>
     </parent>
 
     <artifactId>flink-shaded-jsonpath</artifactId>
     <name>flink-shaded-jsonpath</name>
     <!-- override version to jsonpath version -->
-    <version>2.9.0-21.0</version>
+    <version>2.10.0-21.0</version>
 
     <dependencies>
         <dependency>
@@ -74,4 +74,4 @@ under the License.
             </plugin>
         </plugins>
     </build>
-</project>
+</project>

flink-shaded-jackson-parent/flink-shaded-jsonpath/src/main/resources/META-INF/NOTICE

@@ -6,4 +6,4 @@ The Apache Software Foundation (http://www.apache.org/).
 
 This project bundles the following dependencies under the Apache Software License 2.0 (http://www.apache.org/licenses/LICENSE-2.0.txt)
 
-- com.jayway.jsonpath:json-path:2.9.0
+- com.jayway.jsonpath:json-path:2.10.0

flink-shaded-jackson-parent/pom.xml

@@ -31,7 +31,7 @@ under the License.
     <artifactId>flink-shaded-jackson-parent</artifactId>
     <name>flink-shaded-jackson-parent</name>
     <packaging>pom</packaging>
-    <version>2.18.2-21.0</version>
+    <version>2.20.1-21.0</version>
 
     <modules>
         <module>flink-shaded-jackson-2</module>
@@ -88,4 +88,4 @@ under the License.
         </plugins>
     </build>
 
-</project>
+</project>

flink-shaded-swagger/pom.xml

@@ -32,11 +32,15 @@ under the License.
     <artifactId>flink-shaded-swagger</artifactId>
     <name>flink-shaded-swagger</name>
 
+    <properties>
+        <swagger.core.version>2.2.41</swagger.core.version>
+    </properties>
+
     <dependencies>
         <dependency>
             <groupId>io.swagger.core.v3</groupId>
             <artifactId>swagger-core</artifactId>
-            <version>2.2.19</version>
+            <version>${swagger.core.version}</version>
             <exclusions>
                 <exclusion>
                     <groupId>org.slf4j</groupId>
@@ -51,7 +55,7 @@ under the License.
             <dependency>
                 <groupId>org.yaml</groupId>
                 <artifactId>snakeyaml</artifactId>
-                <version>2.1</version>
+                <version>2.4</version>
             </dependency>
             <dependency>
                 <groupId>com.fasterxml.jackson</groupId>
@@ -99,4 +103,4 @@ under the License.
         </plugins>
     </build>
 
-</project>
+</project>

flink-shaded-swagger/src/main/resources/META-INF/NOTICE

@@ -6,16 +6,16 @@ The Apache Software Foundation (http://www.apache.org/).
 
 This project bundles the following dependencies under the Apache Software License 2.0 (http://www.apache.org/licenses/LICENSE-2.0.txt)
 
-- com.fasterxml.jackson.dataformat:jackson-dataformat-yaml:2.18.2
-- com.fasterxml.jackson.datatype:jackson-datatype-jsr310:2.18.2
-- io.swagger.core.v3:swagger-annotations:2.2.19
-- io.swagger.core.v3:swagger-core:2.2.19
-- io.swagger.core.v3:swagger-models:2.2.19
+- com.fasterxml.jackson.dataformat:jackson-dataformat-yaml:2.20.1
+- com.fasterxml.jackson.datatype:jackson-datatype-jsr310:2.20.1
+- io.swagger.core.v3:swagger-annotations:2.2.41
+- io.swagger.core.v3:swagger-core:2.2.41
+- io.swagger.core.v3:swagger-models:2.2.41
 - jakarta.validation:jakarta.validation-api:2.0.2
-- org.apache.commons:commons-lang3:3.13.0
-- org.yaml:snakeyaml:2.1
+- org.apache.commons:commons-lang3:3.18.0
+- org.yaml:snakeyaml:2.4
 
 This project bundles the following dependencies under the Eclipse Distribution License 1.0 (https://www.eclipse.org/org/documents/edl-v10.php)
 
-- jakarta.activation:jakarta.activation-api:1.2.1
-- jakarta.xml.bind:jakarta.xml.bind-api:2.3.2
+- jakarta.activation:jakarta.activation-api:1.2.2
+- jakarta.xml.bind:jakarta.xml.bind-api:2.3.3

flink-shaded-zookeeper-parent/flink-shaded-zookeeper-35/pom.xml

@@ -34,7 +34,7 @@ under the License.
 
     <properties>
         <zookeeper.version>3.5.10</zookeeper.version>
-        <curator.version>5.4.0</curator.version>
+        <curator.version>5.9.0</curator.version>
     </properties>
 
     <dependencies>
@@ -84,6 +84,10 @@ under the License.
                     <groupId>com.google.guava</groupId>
                     <artifactId>listenablefuture</artifactId>
                 </exclusion>
+                <exclusion>
+                    <groupId>org.jspecify</groupId>
+                    <artifactId>jspecify</artifactId>
+                </exclusion>
                 <exclusion>
                     <!-- not relevant at runtime -->
                     <groupId>com.google.j2objc</groupId>
@@ -139,4 +143,4 @@ under the License.
             </properties>
         </profile>
     </profiles>
-</project>
+</project>

flink-shaded-zookeeper-parent/flink-shaded-zookeeper-35/src/main/resources/META-INF/NOTICE

@@ -6,7 +6,7 @@ The Apache Software Foundation (http://www.apache.org/).
 
 This project bundles the following dependencies under the Apache Software License 2.0 (http://www.apache.org/licenses/LICENSE-2.0.txt)
 
-- com.google.guava:guava:33.4.0-jre
+- com.google.guava:guava:33.5.0-jre
 - io.netty:netty-buffer:4.2.6.Final
 - io.netty:netty-codec-base:4.2.6.Final
 - io.netty:netty-common:4.2.6.Final
@@ -16,8 +16,8 @@ This project bundles the following dependencies under the Apache Software Licens
 - io.netty:netty-transport-native-epoll:4.2.6.Final
 - io.netty:netty-transport-native-unix-common:4.2.6.Final
 - io.netty:netty-transport:4.2.6.Final
-- org.apache.curator:curator-client:5.4.0
-- org.apache.curator:curator-framework:5.4.0
-- org.apache.curator:curator-recipes:5.4.0
+- org.apache.curator:curator-client:5.9.0
+- org.apache.curator:curator-framework:5.9.0
+- org.apache.curator:curator-recipes:5.9.0
 - org.apache.zookeeper:zookeeper-jute:3.5.10
 - org.apache.zookeeper:zookeeper:3.5.10

flink-shaded-zookeeper-parent/flink-shaded-zookeeper-36/pom.xml

@@ -34,7 +34,7 @@ under the License.
 
     <properties>
         <zookeeper.version>3.6.4</zookeeper.version>
-        <curator.version>5.4.0</curator.version>
+        <curator.version>5.9.0</curator.version>
     </properties>
 
     <dependencies>
@@ -109,6 +109,10 @@ under the License.
                     <groupId>com.google.guava</groupId>
                     <artifactId>listenablefuture</artifactId>
                 </exclusion>
+                <exclusion>
+                    <groupId>org.jspecify</groupId>
+                    <artifactId>jspecify</artifactId>
+                </exclusion>
                 <exclusion>
                     <!-- not relevant at runtime -->
                     <groupId>com.google.j2objc</groupId>
@@ -164,4 +168,4 @@ under the License.
             </properties>
         </profile>
     </profiles>
-</project>
+</project>

flink-shaded-zookeeper-parent/flink-shaded-zookeeper-36/src/main/resources/META-INF/NOTICE

@@ -6,7 +6,7 @@ The Apache Software Foundation (http://www.apache.org/).
 
 This project bundles the following dependencies under the Apache Software License 2.0 (http://www.apache.org/licenses/LICENSE-2.0.txt)
 
-- com.google.guava:guava:33.4.0-jre
+- com.google.guava:guava:33.5.0-jre
 - io.dropwizard.metrics:metrics-core:3.2.5
 - io.netty:netty-buffer:4.2.6.Final
 - io.netty:netty-codec-base:4.2.6.Final
@@ -17,8 +17,8 @@ This project bundles the following dependencies under the Apache Software Licens
 - io.netty:netty-transport-native-epoll:4.2.6.Final
 - io.netty:netty-transport-native-unix-common:4.2.6.Final
 - io.netty:netty-transport:4.2.6.Final
-- org.apache.curator:curator-client:5.4.0
-- org.apache.curator:curator-framework:5.4.0
-- org.apache.curator:curator-recipes:5.4.0
+- org.apache.curator:curator-client:5.9.0
+- org.apache.curator:curator-framework:5.9.0
+- org.apache.curator:curator-recipes:5.9.0
 - org.apache.zookeeper:zookeeper-jute:3.6.4
 - org.apache.zookeeper:zookeeper:3.6.4

flink-shaded-zookeeper-parent/flink-shaded-zookeeper-37/pom.xml

@@ -34,7 +34,7 @@ under the License.
 
     <properties>
         <zookeeper.version>3.7.2</zookeeper.version>
-        <curator.version>5.4.0</curator.version>
+        <curator.version>5.9.0</curator.version>
     </properties>
 
     <dependencies>
@@ -94,6 +94,10 @@ under the License.
                     <groupId>com.google.guava</groupId>
                     <artifactId>listenablefuture</artifactId>
                 </exclusion>
+                <exclusion>
+                    <groupId>org.jspecify</groupId>
+                    <artifactId>jspecify</artifactId>
+                </exclusion>
                 <exclusion>
                     <!-- not relevant at runtime -->
                     <groupId>com.google.j2objc</groupId>
@@ -149,4 +153,4 @@ under the License.
             </properties>
         </profile>
     </profiles>
-</project>
+</project>

flink-shaded-zookeeper-parent/flink-shaded-zookeeper-37/src/main/resources/META-INF/NOTICE

@@ -6,7 +6,7 @@ The Apache Software Foundation (http://www.apache.org/).
 
 This project bundles the following dependencies under the Apache Software License 2.0 (http://www.apache.org/licenses/LICENSE-2.0.txt)
 
-- com.google.guava:guava:33.4.0-jre
+- com.google.guava:guava:33.5.0-jre
 - io.dropwizard.metrics:metrics-core:4.1.12.1
 - io.netty:netty-buffer:4.2.6.Final
 - io.netty:netty-codec-base:4.2.6.Final
@@ -17,8 +17,8 @@ This project bundles the following dependencies under the Apache Software Licens
 - io.netty:netty-transport-native-epoll:4.2.6.Final
 - io.netty:netty-transport-native-unix-common:4.2.6.Final
 - io.netty:netty-transport:4.2.6.Final
-- org.apache.curator:curator-client:5.4.0
-- org.apache.curator:curator-framework:5.4.0
-- org.apache.curator:curator-recipes:5.4.0
+- org.apache.curator:curator-client:5.9.0
+- org.apache.curator:curator-framework:5.9.0
+- org.apache.curator:curator-recipes:5.9.0
 - org.apache.zookeeper:zookeeper-jute:3.7.2
 - org.apache.zookeeper:zookeeper:3.7.2

flink-shaded-zookeeper-parent/flink-shaded-zookeeper-38/pom.xml

@@ -33,8 +33,8 @@ under the License.
     <version>${zookeeper.version}-21.0</version>
 
     <properties>
-        <zookeeper.version>3.8.4</zookeeper.version>
-        <curator.version>5.4.0</curator.version>
+        <zookeeper.version>3.8.5</zookeeper.version>
+        <curator.version>5.9.0</curator.version>
     </properties>
 
     <dependencies>
@@ -98,6 +98,10 @@ under the License.
                     <groupId>com.google.guava</groupId>
                     <artifactId>listenablefuture</artifactId>
                 </exclusion>
+                <exclusion>
+                    <groupId>org.jspecify</groupId>
+                    <artifactId>jspecify</artifactId>
+                </exclusion>
                 <exclusion>
                     <!-- not relevant at runtime -->
                     <groupId>com.google.j2objc</groupId>
@@ -153,4 +157,4 @@ under the License.
             </properties>
         </profile>
     </profiles>
-</project>
+</project>