Dependabot PRs

.github/workflows/codeql.yml

@@ -55,7 +55,7 @@ jobs:
         # your codebase is analyzed, see https://docs.github.com/en/code-security/code-scanning/creating-an-advanced-setup-for-code-scanning/codeql-code-scanning-for-compiled-languages
     steps:
     - name: Checkout repository
-      uses: actions/checkout@v4
+      uses: actions/checkout@v5
 
     # Initializes the CodeQL tools for scanning.
     - name: Initialize CodeQL

.github/workflows/main-build-and-deploy-oss.yml

@@ -15,7 +15,7 @@ jobs:
     timeout-minutes: 15
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@v5
 
       - name: Scan With Black Duck
         uses: ./.github/actions/scan-with-blackduck
@@ -29,7 +29,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@v5
         with:
           token: ${{ secrets.GH_TOKEN }}
 

.github/workflows/main-build.yml

@@ -28,7 +28,7 @@ jobs:
       GS_PROJECT_ID: ${{ secrets.GS_PROJECT_ID }}
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@v5
 
       - name: Build
         uses: ./.github/actions/build
@@ -51,7 +51,7 @@ jobs:
     timeout-minutes: 15
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@v5
 
       - name: Scan
         uses: ./.github/actions/scan-with-blackduck
@@ -66,10 +66,10 @@ jobs:
     needs: [build, scan]
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@v5
 
       - name: Set up Java ${{ env.JAVA_VERSION }}
-        uses: actions/setup-java@v4
+        uses: actions/setup-java@v5
         with:
           java-version: ${{ env.JAVA_VERSION }}
           distribution: sapmachine

.github/workflows/pull-request-build.yml

@@ -30,7 +30,7 @@ jobs:
 
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@v5
 
       - name: Build
         uses: ./.github/actions/build

cds-feature-attachments/pom.xml

@@ -72,7 +72,7 @@
         <dependency>
             <groupId>com.github.spotbugs</groupId>
             <artifactId>spotbugs-annotations</artifactId>
-            <version>4.9.3</version>
+            <version>4.9.4</version>
             <scope>test</scope>
         </dependency>
         <dependency>

integration-tests/pom.xml

@@ -32,7 +32,7 @@
             <dependency>
                 <groupId>org.wiremock.integrations</groupId>
                 <artifactId>wiremock-spring-boot</artifactId>
-                <version>3.10.0</version>
+                <version>3.10.6</version>
                 <scope>test</scope>
             </dependency>
         </dependencies>

pom.xml

@@ -30,8 +30,8 @@
 
         <excluded.generation.package>com/sap/cds/feature/attachments/generated/</excluded.generation.package>
 
-        <software.amazon.awssdk-s3-version>2.32.4</software.amazon.awssdk-s3-version>
-        <software.amazon.awssdk-crt-version>0.38.7</software.amazon.awssdk-crt-version>
+        <software.amazon.awssdk-s3-version>2.32.29</software.amazon.awssdk-s3-version>
+        <software.amazon.awssdk-crt-version>0.38.11</software.amazon.awssdk-crt-version>
 
         <!-- Versions of CAP Java and cds-dk used for build and integrations tests -->
         <cds.services.version>3.10.3</cds.services.version> <!-- https://central.sonatype.com/artifact/com.sap.cds/cds-services-api/versions -->
@@ -89,7 +89,7 @@
             <dependency>
                 <groupId>org.mockito</groupId>
                 <artifactId>mockito-bom</artifactId>
-                <version>5.18.0</version>
+                <version>5.19.0</version>
                 <type>pom</type>
                 <scope>import</scope>
             </dependency>
@@ -312,7 +312,7 @@
                 </plugin>
                 <plugin>
                     <artifactId>maven-javadoc-plugin</artifactId>
-                    <version>3.11.2</version>
+                    <version>3.11.3</version>
                 </plugin>
                 <plugin>
                     <artifactId>maven-surefire-plugin</artifactId>
@@ -339,7 +339,7 @@
                 <plugin>
                     <groupId>org.pitest</groupId>
                     <artifactId>pitest-maven</artifactId>
-                    <version>1.20.1</version>
+                    <version>1.20.2</version>
                 </plugin>
                 <plugin>
                     <groupId>com.github.spotbugs</groupId>

storage-targets/cds-feature-attachments-oss/pom.xml

@@ -41,19 +41,19 @@
          <dependency>
             <groupId>com.azure</groupId>
             <artifactId>azure-storage-blob</artifactId>
-            <version>12.25.0</version>
+            <version>12.31.2</version>
         </dependency>
 
         <dependency>
             <groupId>com.google.cloud</groupId>
             <artifactId>google-cloud-storage</artifactId>
-            <version>2.30.0</version>
+            <version>2.55.0</version>
         </dependency>
 
         <dependency>
             <groupId>com.sap.cloud.sdk</groupId>
             <artifactId>sdk-bom</artifactId>
-            <version>5.20.0</version>
+            <version>5.21.0</version>
             <type>pom</type>
             <scope>import</scope>
         </dependency>