#144841: fixed dependency versions

Author: vnenashev

pom.xml

@@ -14,13 +14,13 @@
     <compiler.plugin.version>3.8.1</compiler.plugin.version>
     <assembly.plugin.version>3.1.1</assembly.plugin.version>
 
-    <jetty.version>9.4.56.v20240826</jetty.version>
+    <jetty.version>9.4.57.v20241219</jetty.version>
 
     <jodconverter.version>2.2.1</jodconverter.version>
     <startup.parameters.version>1.0-5</startup.parameters.version>
 
-    <slf4j.version>1.7.28</slf4j.version>
-    <logback.version>1.2.13</logback.version>
+    <slf4j.version>2.0.16</slf4j.version>
+    <logback.version>1.5.16</logback.version>
 
     <junit.version>4.13.1</junit.version>
 
@@ -31,6 +31,9 @@
     <sonar.jacoco.reportPaths>${project.basedir}/../target/jacoco.exec</sonar.jacoco.reportPaths>
     <sonar.language>java</sonar.language>
     <sonar.java.coveragePlugin>jacoco</sonar.java.coveragePlugin>
+
+    <owasp.dependency-check-maven.version>12.0.0</owasp.dependency-check-maven.version>
+    <commons.io.version>2.18.0</commons.io.version>
   </properties>
 
   <build>
@@ -52,7 +55,17 @@
       <plugin>
         <groupId>org.owasp</groupId>
         <artifactId>dependency-check-maven</artifactId>
-        <version>6.4.1</version>
+        <version>${owasp.dependency-check-maven.version}</version>
+        <configuration>
+          <suppressionFile>suppressions.xml</suppressionFile>
+        </configuration>
+        <executions>
+          <execution>
+            <goals>
+              <goal>check</goal>
+            </goals>
+          </execution>
+        </executions>
       </plugin>
     </plugins>
     <pluginManagement>
@@ -102,7 +115,7 @@
       <dependency>
         <groupId>commons-io</groupId>
         <artifactId>commons-io</artifactId>
-        <version>2.7</version>
+        <version>${commons.io.version}</version>
       </dependency>
       <!-- [end] Fix of CVE-2021-29425 (part 2 of 2) -->
       <dependency>

suppressions.xml

@@ -0,0 +1,9 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<suppressions xmlns="https://jeremylong.github.io/DependencyCheck/dependency-suppression.1.3.xsd">
+    <suppress>
+        <cve>CVE-2024-6763</cve>
+    </suppress>
+    <suppress>
+        <cpe>cpe:/a:apache:openoffice</cpe>
+    </suppress>
+</suppressions>